Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/09/09 9:33 a.m.•13 views

Malicious code in chai-as-sleek (npm)

Source: amazon-inspector 782914cb65e0d30697eb54f50a4c5b740a3a53941abc185759e296c1d2ec8e9e Package published as 'chai-as-sleek' impersonates the pino logger: README, LICENSE, docs/, and index.d.ts are copied verbatim from pino, while package.json description reads 'This document describes the...

5.9AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/09/09 6:49 a.m.•19 views

MAL-2026-16077 Malicious code in chai-as-sleek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782914cb65e0d30697eb54f50a4c5b740a3a53941abc185759e296c1d2ec8e9e Package published as 'chai-as-sleek' impersonates the pino logger: README, LICENSE, docs/, and index.d.ts are copied verbatim from pino, while...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/09 6:49 a.m.•37 views

Malicious code in chai-as-sleek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782914cb65e0d30697eb54f50a4c5b740a3a53941abc185759e296c1d2ec8e9e Package published as 'chai-as-sleek' impersonates the pino logger: README, LICENSE, docs/, and index.d.ts are copied verbatim from pino, while...

5.9AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/09/09 6:31 a.m.•11 views

Malicious Package

Overview chai-as-sleek is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder